@redhat-cloud-services/eslint-config-redhat-cloud-services@3.3.12
⚠ Under reviewRecommended eslint configuration used in cloud.redhat.com frontend apps.
AI Security Review
scanned 21h ago · by lpm-firewall-aiThe package has no install lifecycle script, and its inspected entrypoint assembles an ESLint configuration. Several imported registry dependencies have metadata-only source in this snapshot, leaving selected runtime dependencies unresolved; this supports manual review, not a claim of malicious behavior.
Decision evidence
public snapshot- The manifest has no lifecycle scripts and declares the package entrypoint and plugin dependencies.
- The entrypoint builds an ESLint configuration from parser and plugin imports.
- Some imported dependency source is unavailable in the inspected snapshot, leaving runtime behavior unresolved.
- The inspected entrypoint configures lint rules and language parsers; no concrete attack behavior was identified in the inspected source.
Source & flagged code
5 flagged · loading sourceThe manifest has no lifecycle scripts and declares the package entrypoint and plugin dependencies.
package.jsonView on unpkg · L10The entrypoint builds an ESLint configuration from parser and plugin imports.
index.jsView on unpkg · L13Findings
Affected versions and remediation
This report applies to @redhat-cloud-services/eslint-config-redhat-cloud-services@3.3.12.
See all versions of @redhat-cloud-services/eslint-config-redhat-cloud-services for other recorded verdicts.
- Review the evidence and your use of @redhat-cloud-services/eslint-config-redhat-cloud-services@3.3.12 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.